Airwallex is a financial services company that has developed a “global financial platform for modern businesses.” As an employer, the company strives to cul
Senior Corporate Security Engineer
Location
California
Posted
51 days ago
Salary
$5 / year
Seniority
Senior
Job Description
Senior Corporate Security Engineer
Airwallex
About Airwallex Airwallex is the only unified payments and financial platform for global businesses. Powered by our unique combination of proprietary infrastructure and software, we empower over 200,000 businesses worldwide - including Brex, Rippling, Navan, Qantas, SHEIN and many more - with fully integrated solutions to manage everything from business accounts, payments, spend management and treasury, to embedded finance at a global scale. Proudly founded in Melbourne, we have a team of over 2,000 of the brightest and most innovative people in tech across 26 offices around the globe. Valued at US$8 billion and backed by world-leading investors including T. Rowe Price, Visa, Mastercard, Robinhood Ventures, Sequoia, Salesforce Ventures, DST Global, and Lone Pine Capital, Airwallex is leading the charge in building the global payments and financial platform of the future. If you're ready to do the most ambitious work of your career, join us. Attributes We Value We hire successful builders with founder-like energy who want real impact, accelerated learning, and true ownership. You bring strong role-related expertise and sharp thinking, and you're motivated by our mission and operating principles. You move fast with good judgment, dig deep with curiosity, and make decisions from first principles, balancing speed and rigor. You're humble and collaborative; turn zero-to-one ideas into real products, and you "get stuff done" end-to-end. You use AI to work smarter and solve problems faster. Here, you'll tackle complex, high-visibility problems with exceptional teammates and grow your career as we build the future of global banking. If that sounds like you, let's build what's next. Your role As a Senior Corporate Security Engineer, you will be a critical part of defending Airwallex's enterprise systems and employees from threats such as malware, phishing and unauthorised access. This role is a highly technical opportunity to detect, investigate and prevent security issues across a modern corporate environment. You will work on digital forensics, incident response and tool development and deployment, protecting a range of corporate IT platforms from endpoints to identity providers. What you'll be doing - Contribute to incident response for malware, phishing, digital forensics. - Design, develop, test, and evaluate new corporate security controls for a rapidly growing business. - Perform incident response and hunt through log sources to identify new threats. - Design and implement security alerts and workflows to support the incident response lifecycle. - Secure corporate IT infrastructure and remediate issues across identity providers, endpoints, corporate networks and other platforms. - Deploy, configure and operate security tooling with a laser focus on impact. What you'll bring - A passion for solving the complex challenges of high-growth startups. - Self motivation and drive to learn new skills, or dive deeper into existing skills. - Bachelor's degree in Computer Science, Cybersecurity or similar. - 5+ years working in a security engineering or incident response role within a tech company. - Strong experience with Crowdstrike, Splunk or other common security monitoring tools. - In depth understanding of common attacker tools and techniques, how they can be detected and prevented, and ability to respond to incidents with high depth and quality of investigation. - Experience with GCP, Alibaba Cloud or other cloud platforms is preferred. - Experience with Okta, Google Workspace and cloud-based VPN services is preferred. - Experience securing endpoints, including with MDM tooling such as Kandji, Intune - Strong communication skills with the ability to explain technical security and software concepts to a non-technical audience. - Scripting experience such as with Python, Bash, Powershell. Applicant Safety Policy: Fraud and Third-Party Recruiters To protect you from recruitment scams, please be aware that Airwallex will not ask for bank details, sensitive ID numbers (i.e. passport), or any form of payment during the application or interview process. All official communication will come from an @airwallex.com email address. Please apply only through careers.airwallex.com or our official LinkedIn page. Airwallex does not accept unsolicited resumes from search firms/recruiters. Airwallex will not pay any fees to search firms/recruiters if a candidate is submitted by a search firm/recruiter unless an agreement has been entered into with respect to specific open position(s). Search firms/recruiters submitting resumes to Airwallex on an unsolicited basis shall be deemed to accept this condition, regardless of any other provision to the contrary. Equal opportunity Airwallex is proud to be an equal opportunity employer. We value diversity and anyone seeking employment at Airwallex is considered based on merit, qualifications, competence and talent. We don't regard color, religion, race, national origin, sexual orientation, ancestry, citizenship, sex, marital or family status, disability, gender, or any other legally protected status when making our hiring decisions. If you have a disability or special need that requires accommodation, please let us know. #BI-Hybrid
Benefits
- 401(K), Commuter benefits, Company equity, Company-sponsored outings, Customized development tracks, Dental insurance, Disability insurance, Volunteer in local community, Flexible Spending Account (FSA), Flexible work schedule, Free daily meals, Generous parental leave, Generous PTO, Company-sponsored happy hours, Health insurance, Life insurance, Mentorship program, Paid volunteer time, Open office floor plan, Paid holidays, Paid sick days, Partners with nonprofits, Performance bonus, Pet friendly, Pet insurance, Promote from within, Recreational clubs, Lunch and learns, Free snacks and drinks, Team based strategic planning, OKR operational model, Team workouts, Mandated unconscious bias training, Vision insurance, Wellness programs, Some meals provided, Mental health benefits, Employee-led culture committees, Day off for your birthday, Quarterly engagement surveys, Hybrid work model, In-person all-hands meetings, In-person revenue kickoff, President's club, Employee awards, Transgender health care benefits, Mother's room, Virtual coaching services, Bereavement leave benefits
Related Guides
Related Categories
Related Job Pages
More Security Engineer Jobs
Artiste de rigging en chef-Lead Rigger
2K2K develops interactive entertainment for handheld gaming systems, console systems, personal computers, and mobile devices. The gaming and entertainment company
Qui nous sommes The Gearbox Entertainment Company accueille une équipe internationale de haut niveau, passionnée par la création de jeux vidéo primés et innovants. Nos univers riches s’étendent au-delà du jeu grâce à des récits transmédia, des expériences en direct et des produits grand public.Gearbox Entertainment est devenue mondialement reconnue pour avoir développé des franchises emblématiques comme Borderlands, Tiny Tina’s Wonderlands et Brothers in Arms, ainsi que pour le développement continu de propriétés acquises, notamment Duke Nukem, Risk of Rain et Homeworld. Fondée en 1999 sous le nom de Gearbox Software par une équipe de professionnels expérimentés, l’entreprise est basée à Frisco, au Texas. The Gearbox Entertainment Company est fière d’appartenir à 2K, une maison d’édition de Take-Two Interactive Software, Inc. (NASDAQ : TTWO). Pour en savoir plus, rendez-vous sur www.GearboxSoftware.com . Gearbox Software recherche un(e) Artiste de rigging en chef passionné(e) par l’innovation en matière de fidélité et de qualité de l’animation des personnages dans les jeux vidéo.Ce poste repose principalement sur la gestion d’une équipe d’artiste en rigging, assurant un soutien continu aux technologies en cours, tout en travaillant à l’amélioration des méthodologies et des pratiques de planification en collaboration avec l’équipe d’animation afin d’optimiser l’efficacité globale du contenu. Responsabilités : - Diriger, encadrer et superviser une équipe de riggers, en offrant des conseils, des retours constructifs et un soutien technique pour favoriser leur croissance et leur réussite. - Développer, maintenir et optimiser les méthodologies, outils et flux de travail liés au rigging afin d’améliorer l’efficacité et la qualité. Cela inclut la création de scripts et d’outils de rigging en Python et/ou MEL. - Créer des rigs de haute qualité, prêts à être intégrés en production, pour une grande variété de personnages, créatures, objets et véhicules, que ce soit des bipèdes, quadrupèdes ou objets mécaniques complexes. - Être le point de contact principal pour les questions techniques liées au rigging, en collaboration étroite avec les équipes animation, conception de personnages et programmation pour diagnostiquer et résoudre les problèmes. - Travailler en étroite collaboration avec les animateurs pour comprendre leurs besoins et concevoir des rigs offrant une grande liberté artistique et une expressivité optimale. Collaborer avec les artistes de personnages pour s’assurer que les modèles sont adaptés au rigging. - Établir et documenter des normes, conventions et meilleures pratiques en matière de rigging pour l’équipe. - Suivre les évolutions de l’industrie, des outils et des technologies liées au rigging et à l’animation, et proposer activement des améliorations à nos processus. - Communiquer et collaborer étroitement avec les programmeurs gameplay et moteur pour développer de nouvelles fonctionnalités nécessaires à la mise en œuvre de présentations haut de gamme et sophistiquées. - Documenter la fonctionnalité et la structure des systèmes pour permettre leur utilisation par de futurs employés ou d’autres équipes. - Identifier les axes d’amélioration des méthodologies et mettre en œuvre des solutions concrètes. Exigences : - 6 ans d’expérience minimum en tant qu’artiste de rigging dans l’industrie des jeux vidéo, dont au moins 2 ans en poste de chef ou de rôle senior. - Excellentes compétences en leadership et en communication, avec la capacité de transmettre clairement des concepts techniques à des équipes techniques comme non techniques. - Maîtrise approfondie d’un logiciel 3D majeur (ex. : Maya, 3ds Max, Blender) et connaissance approfondie de ses outils de rigging. - Compréhension solide des pipelines d’animation, de la modélisation jusqu’à l’implémentation finale des assets. - Capacité à collaborer efficacement avec des équipes multidisciplinaires. - Maîtrise de Python et/ou de MEL pour le développement d’outils et l’automatisation des méthodologies. - Attitude positive et capacité à recevoir et à donner des retours objectifs sur l’expérience de jeu et la présentation. - Expérience avec les systèmes d’animation Unreal. - Expérience en configuration de ragdolls et en simulation de tissus. Atouts : - Expérience en programmation en C++. - Expérience avec des systèmes et logiciels de motion capture, comme Vicon Blade. - Expérience approfondie avec les systèmes d’animation Unreal. - Développement de nouvelles fonctionnalités d’animation directement dans le moteur. Notre engagement envers l’égalité des chances Gearbox Studio Québec s’engage à offrir un environnement de travail inclusif, équitable et exempt de discrimination, reflétant la diversité du monde que nous aspirons à divertir. En tant que studio soucieux de l’égalité des chances, nous ne pratiquons aucune discrimination fondée sur la race, la couleur, la religion, le sexe, la grossesse, l’orientation sexuelle, l’identité ou l’expression de genre, l’origine nationale, l’âge, l’handicap, l’information génétique ou tout autre statut protégé par la loi applicable. Nous nous engageons également à offrir des accommodements raisonnables aux candidats et employés qualifiés pour leur permettre de participer pleinement au processus de recrutement, d’exercer leurs fonctions essentielles et d’accéder aux mêmes avantages et opportunités.Veuillez noter que 2K Games et ces studios n'utilisent jamais d'applications de messagerie instantanée ni de courriels personnels pour contacter des candidats ou réaliser des entretiens lorsqu'ils vous contactent par email, ils utilisent uniquement des adresses se terminant par @2K.com. -------- Who We Are The Gearbox Entertainment Company is home to a world-class team that entertains the world with award-winning and genre-defining video games.Our games are entrenched with rich universes that are expanded upon via transmedia storytelling, live experiences, and consumer products.Gearbox Entertainment has become widely known for developing successful game franchises such as Borderlands, Tiny Tina’s Wonderlands, and Brothers in Arms, as well for continued development of acquired properties including Duke Nukem, Risk of Rain, and Homeworld. The companywas founded as Gearbox Software in 1999 by a team of industry veterans and is headquartered in Frisco, Texas. The Gearbox Entertainment Company is proud to be part of 2K, a publishing label of Take-Two Interactive Software, Inc. (NASDAQ: TTWO). For more information, visit www.GearboxSoftware.com. Gearbox Software is looking for a Lead Rigger with a passion for pushing character animation fidelity in games to new levels. This role primarily focuses on managing a team of Riggers providing ongoing support for current tech and working to create improved pipeline and planning practices with animation to improve overall content efficiency. Responsibilities: - Lead, mentor, and manage a team of riggers, providing guidance, feedback, and technical support to help them grow and succeed. - Develop, maintain, and optimize rigging pipelines, tools, and workflows to improve efficiency and quality. This includes creating rigging scripts and tools in Python and/or MEL. - Create high-quality, production-ready rigs for a wide range of characters, creatures, props, and vehicles, from bipeds and quadrupeds to complex mechanical objects. - Act as the primary point of contact for rigging-related technical issues, working closely with the animation, character, design and engineering teams to troubleshoot and resolve problems. - Collaborate with animators to understand their needs and develop rigs that allow for a high degree of artistic control and expressiveness. Work with character artists to ensure models are rig friendly. - Establish and document rigging standards, conventions, and best practices for the team. - Stay up to date with industry trends, tools, and technologies related to rigging and animation, and proactively seek ways to improve our processes. - Communicate and work closely with Gameplay and Engine Programmers to develop new features needed to deliver highly polished, sophisticated presentations. - Document system functionality and breakdowns for use by future employees or other teams. - Identify potential pipeline improvements and act to improve them. Qualifications: - 6+ years of experience as a Rigger in the video game industry, with at least 2 years in a lead or senior role. - Strong leadership and communication skills, with the ability to clearly articulate technical concepts to both technical and non-technical team members. - Expert knowledge of a major 3D software package (e.g., Maya, 3ds Max, Blender) and a strong understanding of its rigging toolsets. - Needs to be familiar with animation pipelines from mesh to implementation of final assets. - Able to collaborate and work well with teams from various disciplines. - Proficiency in Python and/or MEL scripting for tool development and pipeline automation. - A positive attitude and an ability to receive and provide objective feedback on areas of game feel and presentation. - Experience in Unreal Animation Systems - Experience with ragdoll setup and cloth generation Bonus Points For: - Experience with programming in C++ - Experience with mocap systems and software such as Vicon Blade - Experience in Unreal Animation Systems - Developing new animation features in-engine Gearbox Entertainment is committed to ensuring that all team members work in an environment free from discrimination and harassment, and one that reflects the diversity of the world it strives to entertain. As an equal opportunity employer, Gearbox Entertainment does not discriminate against applicants or employees on the basis of race, color, religion, sex, pregnancy, sexual orientation, gender identity or expression, national origin, age, disability, or genetic information, or any other status protected by applicable law. Gearbox Entertainment is also committed to providing reasonable accommodations to qualified individuals to participate in the job application process, to perform the essential functions of a job, and to enjoy the benefits and privileges of employment equal to those enjoyed by individuals without disabilities. If you need a reasonable accommodation at any point during the job application process, please contact us for more information.Please note that 2K Games and its studios never uses instant messaging apps or personal email accounts to contact prospective employees or conduct interviews and when emailing, only use 2K.com accounts #LI-Remote #LI-Onsite #LI-Hybrid
Information Security Program Manager - Governance, Risk, & Compliance (GRC)
UpstartOur mission is to enable effortless credit based on true risk.
About Upstart At Upstart, we’re united by a mission that matters: to radically reduce the cost and complexity of borrowing for all Americans. Every day, we bring creativity, experimentation, and advanced AI to reshape access to credit, helping millions move forward financially with clarity and confidence. As the leading AI lending marketplace, we partner with banks and credit unions to expand access to affordable credit through technology that’s both radically intelligent and deeply human. Our platform runs over one million predictions per borrower using more than 1,800 signals, powering smarter, fairer decisions for millions of customers. But the numbers only hint at the impact. Every idea, every voice, and every contribution moves us closer to a world where credit never stands between people and their financial progress. We’re proudly digital-first, giving most Upstarters the flexibility to do their best work from wherever they thrive, alongside teammates across 80+ cities in the US and Canada. Digital-first doesn’t mean distant. We’re intentional about in-person connection through team onsites, planning sessions, and moments that spark creativity and trust. And whether you choose to work primarily from home or collaborate in-person from one of our offices in Columbus, Austin, the Bay Area, or New York City (opening Summer 2026), you’ll have the support to work in the way that works best for you. If you’re energized by tackling meaningful problems, excited to innovate with purpose, and motivated by work that truly matters, we’d love to hear from you. The Team: Upstart’s Information Security Governance, Risk, and Compliance (GRC) team is passionate about building clear, scalable approaches to security governance, risk management, and regulatory compliance. We believe effective security governance should enable innovation, move at the speed of the business, and support informed, risk-based decision-making. Our team’s mission is to protect customer trust and meet regulatory and contractual commitments by defining, assessing, and maintaining strong security controls across our product platforms and enterprise. We achieve this through thoughtful automation, close collaboration with engineering and business partners, and a focus on delivering a low-friction, positive experience for Upstarters. As an Information Security Program Manager within GRC, you will own and execute defined GRC programs that help protect customer trust, support regulatory requirements, and enable secure business growth. You will work closely with technical, operational, and business partners to assess risk, support compliance initiatives, and help embed security practices into day-to-day operations. How you’ll make an impact - Enable teams to move faster and more securely by acting as a trusted GRC partner, translating audit, risk, and compliance requirements into practical guidance. - Ensure audit readiness and successful outcomes by coordinating core assurance activities, including SOX IT and SOC 2, across engineering, IT, and business teams. - Protect customer and partner trust by managing security due diligence requests from prospective and existing business partners, delivering clear and timely responses. - Strengthen security governance by owning policy management, including drafting, maintaining, reviewing, and driving awareness of information security policies and standards. - Reduce third-party risk by supporting and executing the information security third-party risk management program, including vendor assessments, risk tracking, and remediation follow-up. - Improve the efficiency and consistency of GRC operations through process improvement and thoughtful use of automation and tooling. Minimum Qualifications - 5+ years of experience in information security, GRC, or IT/Information Security audit. - Demonstrated experience operating GRC programs (supporting audits, risk assessments, control testing activities, policy management, 3rd party security risk) in a regulated technology or financial services environment. - Working knowledge and ability to apply common security and compliance frameworks (SOC 2, NIST CSF 2.0, NIST SSDF, NYDFS, etc.). - Strong written and verbal communication skills with both technical and non-technical audiences. - Ability to design metrics, KRIs, and reporting for diverse stakeholders. Preferred Qualifications - Experience in cloud-native environments (AWS preferred). - Experience using GRC automation tools. - Relevant certifications (CISSP, CISA, CRISC, CISM). - Scripting or light coding skills to automate workflows and system integrations is a plus. - Familiarity with privacy and data protection requirements (e.g., GDPR, CCPA). Position location This role is available in the following locations: Remote, San Mateo, Columbus, Austin Time zone requirements The team operates on the East Coast/Central/Mountain/West Coast time zones. Travel requirements As a digital first company, the majority of your work can be accomplished remotely. The majority of our employees can live and work anywhere in the U.S but are expected to still spend high quality time in-person collaborating via regular onsites. The in-person sessions’ cadence varies depending on the team and role; most teams meet once or twice per quarter for 2-4 consecutive days at a time. #LI-REMOTE #LI-Associate At Upstart, your base pay is one part of your total compensation package. The anticipated base salary for this position is expected to be within the below range. Your actual base pay will depend on your geographic location–with our “digital first” philosophy, Upstart uses compensation regions that vary depending on location. Individual pay is also determined by job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. In addition, Upstart provides employees with target bonuses, equity compensation, and generous benefits packages (including medical, dental, vision, and 401k). United States | Remote - Anticipated Base Salary Range $115,800—$160,100 USD What you'll love At Upstart, our benefits are designed to support your health, financial well-being, family, and personal growth. Here’s what you can expect: - Competitive compensation, including base pay, bonus opportunities, and annual equity grants that vest quarterly - Generous 401(k) plan with Upstart matching $2 for every $1 contributed, up to $15,000 per year - Employee Stock Purchase Plan (ESPP) with discounted stock purchase options for eligible employees - Affordable medical, dental, and vision coverage, with multiple plan options - Upstart covers 90% to 100% of the cost depending on the plans you choose - Health Savings Account contributions from Upstart for eligible plans - Income protection benefits, including company-paid Basic Life, AD&D, and Short- and Long-Term Disability coverage, with options to purchase supplemental coverage - Paid time off, sick and safe time, and company holidays - Paid family and parental leave to support caregiving and major life moments - Family-centered benefits through Carrot and Cleo, supporting fertility, parenthood, and caregiving - Employee Assistance Program (EAP) offering mental health support and life-centered resources - Financial wellness resources, including access to financial planning tools and a financial concierge service - Annual wellness allowance to support your physical and emotional well-being and personal development, based on what matters most to you - Annual productivity allowance to invest in relevant tools and resources you need to do your best work, no matter where you work from - Connection and community through team events and onsites, all-company updates, and employee resource groups (ERGs) - Onsite perks, including catered lunches and fully stocked micro-kitchens when working from one of our four offices, located in the Bay Area, Austin, Columbus, and New York City (opening Summer 2026!). Upstart is a proud Equal Opportunity Employer. Just as we are dedicated to improving access to affordable credit for all, we are committed to inclusive and fair hiring practices. If you require reasonable accommodation in completing an application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please email candidate_accommodations@upstart.com https://www.upstart.com/candidate_privacy_policy
Senior Security Engineer, Infrastructure & Automation
WebflowWebflow is the way to design, build, and launch powerful websites visually — without coding.
At Webflow, we’re building the world’s leading AI-native Digital Experience Platform, and we’re doing it as a remote-first company built on trust, transparency, and a whole lot of creativity. This work takes grit, because we move fast, without ever sacrificing craft or quality. Our mission is to bring development superpowers to everyone. From entrepreneurs launching their first idea to global enterprises scaling their digital presence, we empower teams to design, launch, and optimize for the web without barriers. We believe the future of the web, and work, is more open, more creative, and more equitable. And we’re here to build it together. We’re looking for a Senior Security Engineer, Infrastructure & Automation to join Webflow’s Security Operations team. You’ll collaborate closely with our Infrastructure Engineering, Infrastructure Security, Enterprise Security, and Application Security teams to harden our AWS and GCP environments, embed security into our CI/CD pipelines, and champion secure-by-default infrastructure practices. This role is ideal for an engineer who thrives at the intersection of infrastructure security and software engineering. You’ll design and build internal security platforms, APIs, and automation that help Webflow detect, triage, and remediate infrastructure vulnerabilities faster, while enabling engineering teams to ship securely by default. About the role: - Location: Remote-first (United States; BC & ON, Canada; Ireland; United Kingdom; Mexico; Argentina) - Full-time - Permanent - Exempt - The cash compensation for this role is tailored to align with the cost of labor in different geographic markets. We've structured the base pay ranges for this role into zones for our geographic markets, and the specific base pay within the range will be determined by the candidate’s geographic location, job-related experience, knowledge, qualifications, and skills. - United States (all figures cited below are in USD and pertain to workers in the United States) - Zone A: [$158,000 - 198,000] - Zone B: [$149,000 - 186,000] - Zone C: [$139,000 - 174,000] - Canada (figures cited below are in CAD and pertain to workers in ON & BC, Canada) - [$180,000 - 225,000] - Application Information: - Application deadline: applications accepted on an ongoing basis until position is closed and filled As a Senior Security Engineer, you’ll … You’ll lead and execute cloud security initiatives that strengthen Webflow’s infrastructure and operational security posture. Responsibilities are grouped by scope and impact. Infrastructure Security - Perform infrastructure security reviews across cloud services, network design, IAM, and platform components. - Design, implement, and maintain secure AWS and GCP infrastructure following best practices (least privilege, network segmentation, encryption, monitoring). - Partner with infrastructure and platform teams to embed security controls in CI/CD pipelines, infrastructure as code, and containerized environments. - Own the cloud security posture management (CSPM) strategy, ensuring continuous compliance and automated detection of misconfigurations. - Collaborate with engineering teams to secure Kubernetes and containerized workloads, ensuring adherence to runtime and image scanning policies. - Respond to and investigate cloud-related security incidents, providing technical expertise during triage and remediation. - Contribute to the design and execution of Webflow’s cloud security roadmap, identifying areas for automation and scalability. - Conduct threat modeling and risk assessments for cloud architecture and new service deployments. - Translate raw findings into actionable engineering fixes, not just tickets or reports. Security Automation & Platform Engineering - Design and build internal security services, APIs, and tools that automate infrastructure vulnerability detection, triage, reporting, and remediation. - Develop security automation that integrates with CI/CD, cloud control planes, and developer workflows to shift detection and remediation earlier in the lifecycle. - Experiment with and operationalize agentic and AI-assisted approaches to security detection, analysis, and response as the threat landscape evolves. About YouYou’ll thrive as a Senior Security Engineer, Infrastructure & Automation if you: - Have 5+ years of experience in cloud security, infrastructure engineering, or security automation (with at least 3 years focused on AWS and GCP). - Demonstrate strong knowledge of AWS and GCP services and security controls - Have hands-on experience securing Kubernetes and containerized workloads. - Are proficient with infrastructure as code (Pulumi, Terraform, CloudFormation) - Understand network security concepts including firewalls, segmentation, and zero trust. - 3+ years of automation script authoring for security tasks using Python, Go, Javascript, Typscript, or similar languages. Comfortable architecting automation solutions using full stack components. - Are comfortable operating in ambiguous, fast-changing environments, adapting tooling and approaches as threats and technologies evolve. - Bring a proactive, builder’s mindset — identifying and closing gaps before they become issues. Our Core Behaviors: - Build lasting customer trust. We build trust by taking action that puts customer trust first. - Win together. We play to win, and we win as one team. Success at Webflow isn't a solo act. - Reinvent ourselves. We don't just improve what exists, we imagine what's possible. - Deliver with speed, quality, and craft. We move fast because the moment demands it, and we do so without lowering the bar. Benefits - Ownership in what you help build. Every permanent Webflower receives equity (RSUs) in our growing, privately held company. - Health coverage that actually covers you. Comprehensive medical, dental, and vision plans for full-time employees and their dependents, with Webflow covering most premiums. - Support for every stage of family life. 12 weeks of paid parental leave for all parents and 6+ weeks of additional paid leave for birthing parents. Plus inclusive care for family planning, menopause, and midlife transitions. - Time off that’s actually off. Flexible vacation, paid holidays, and a sabbatical program to help you recharge and come back inspired. - Wellness for the whole you. Access to mental health resources, therapy and coaching. - Invest in your future. A 401(k) with 100% employer match (up to $6,000/year) in the U.S., and support for retirement savings globally. - Monthly stipends that flex with your life. Localized support for work and wellness expenses — from Wi-Fi to workouts. - Bonus for building together. All full-time, permanent, non-commission employees are eligible for our annual WIN bonus program. Temporary employees may be eligible for paid holiday and time off, statutory leaves of absence, and company-sponsored medical benefits depending on their Fixed Term Contract and their country/state of employment. Be you, with usAt Webflow, equality is a core tenet of our culture. We are an Equal Opportunity (EEO)/Veterans/Disabled Employer and are committed to building an inclusive global team that represents a variety of backgrounds, perspectives, beliefs, and experiences. Employment decisions are made on the basis of job-related criteria without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other classification protected by applicable law. Pursuant to the San Francisco Fair Chance Ordinance, Webflow will consider for employment qualified applicants with arrest and conviction records. Stay connectedNot ready to apply, but want to be part of the Webflow community? Consider following our story on our Webflow Blog, LinkedIn, X (Twitter), and/or Glassdoor. Please note:We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Upon interview scheduling, instructions for confidential accommodation requests will be administered. To join Webflow, you'll need a valid right to work authorization depending on the country of employment. If you are extended an offer, that offer may be contingent upon your successful completion of a background check, which will be conducted in accordance with applicable laws. We may obtain one or more background screening reports about you, solely for employment purposes. For information about how Webflow processes your personal information, please review Webflow’s Applicant Privacy Notice.
Security Engineer - Vulnerability Detection
CrowdStrikeCrowdStrike has redefined security with the world’s most advanced cloud-native platform that protects and enables the people, processes and technologies that drive modern enterprise. Tested and proven, the world's largest organizations trust CrowdStrike to stop breaches with unparalleled protection against the most sophisticated cyberattacks. The CrowdStrike culture has been built upon our Core Values since the day we began. We are Fanatical About the Customer, Relentlessly Focused on Innovation and believe that our Limitless Passion drives Unlimited Potential for every CrowdStriker. As a purpose-built remote-first company, we believe cultivating a connected culture for every employee, no matter where they are in the world, is a key ingredient in building a high-performing, diverse team. We don’t have a mission statement. We’re on a mission—to stop breaches. Ready to join a mission that matters?
Title: Security Engineer - Vulnerability Detection (Hybrid) Location: Sunnyvale United States Job Description: As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn't changed - we're here to stop breaches, and we've redefined modern security with the world's most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We're always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you. About the Role: CrowdStrike is looking for a Vulnerability Detection Engineer for our Exposure Management group. This is an Individual Contributor role in the Exposure Management Content team responsible for researching, developing and delivering our Host and Network Vulnerability Assessment detections for CrowdStrike as also collaborating on the development of new features and technical solutions. This role is hybrid, requiring 2-3 days per week on-site at our Sunnyvale, CA office. This person would work closely with other internal teams and product management to understand the requirements and needs on Vulnerability Detection capabilities for the product. They will be technically involved in the capabilities for Exposure Management to detect, track, report and prioritize vulnerabilities on assets. Strong communication and organizational skills are essential. The successful candidate should have had experience within Exposure Management, Vulnerability Analysis and Detection and be able to develop detection pipelines for vulnerabilities and other threats. Work experience in the security industry is highly desirable, including a strong understanding of some of the current prevalent products in this space. What You'll Do: - Collaborate and lead a Team of Vulnerability Detection Engineers and Researchers to plan, coordinate and execute Vulnerability Detection Coverage for Exposure Management Supported Platforms - Participate and lead Company Thought Leadership efforts and guidance for analysis on prevalent vulnerabilities and Risk Based Vulnerability Management. - Vulnerability data discovery and validation (Data efficacy & Accuracy) - Collaborate with multi-functional teams across various physical locations including product management and other engineering disciplines. - Lead and manage other projects as assigned - AI-Enhanced Vulnerability Detection Research: Leverage generative AI tools to accelerate vulnerability analysis, proof-of-concept development, and detection rule creation while maintaining human oversight for validation and detection accuracy. - Intelligent Vulnerability Assessment Pipeline: Design and implement AI agent workflows to automate multi-step vulnerability validation processes (e.g., discovery, analysis, prioritization, remediation guidance) while ensuring human-in-the-loop verification for critical vulnerability detections and false positive reduction. What You'll Need: - Minimum 5 years of overall experience as an Individual Contributor. Experience in management and leadership roles is a plus. - Ability and desire to being hands on as well as empowering peers while collaborating across different functional areas and products - Ability to develop, coordinate and execute on an engineering roadmap - Ability to communicate and articulate crisply at all levels from executive staff to engineers - Ability to communicate, collaborate, and work effectively in a distributed team - Familiarity and experience with the Agile process - Experience in Cybersecurity Industry - Programming/scripting knowledge for automating day to day tasks - Python/ Perl, Golang. Required Skills: - Understanding of Vulnerabilities, mitigations and remediations - Understanding of Vulnerability and Software Detection techniques - Understanding of Vulnerability Prioritization Models - Experience with Security/Vulnerability detections development and release - Experience of Vulnerability Management product development - Experience designing and implementing validation workflows for Security Based products - Experience working in remote & distributed environments - Solid design and problem-solving skills with a demonstrated passion for engineering excellence, pragmatism, quality, security, and performance - Experience with Go and/or Python automation - Experience with AI/ML models is a plus #LI-AP1 #LI-AM1 #HTF Benefits of Working at CrowdStrike: - Market leader in compensation and equity awards - Comprehensive physical and mental wellness programs - Competitive vacation and holidays for recharge - Paid parental and adoption leaves - Professional development opportunities for all employees regardless of level or role - Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections - Vibrant office culture with world class amenities - Great Place to Work Certified across the globe CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program. CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements. If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at recruiting@crowdstrike.com for further assistance. Find out more about your rights as an applicant. CrowdStrike participates in the E-Verify program. Notice of E-Verify Participation Right to Work CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $100,000 - $145,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off. For detailed information about the U.S. benefits package, please click here.




